Behavior Detection

Enable Behavior Detection

This check box enables or disables the Behavior Detection component.

The check box is selected by default.

Behavior Detection component operating mode

The action that the application performs upon detecting malicious activity in the operating system:

• Block the application performing malicious activity. Kaspersky Industrial CyberSecurity for Linux Nodes terminates the application process and logs information about the detected malicious activity.
• Notify user (default value). Kaspersky Industrial CyberSecurity for Linux Nodes does not terminate the process performing malicious activity. It only records detection of malicious activity in the event log.

Use exclusions by process

This check box enables or disables exclusions by process in the operation of the Behavior Detection component.

This check box is cleared by default.

The Configure button opens the Exclusions by process window. In this window, you can exclude the activity of processes.